(Xojo Plugin) SSH HSM Public Key Authentication

Demonstrates how to authenticate with an SSH server using public key authentication using an HSM (USB token or smartcard).

Chilkat Xojo Plugin Download Xojo Plugin for Windows, Linux, Mac OS X, and ARM, ARM64

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Note: Chilkat's PKCS11 implementation runs on Windows, Linux, MacOs, and other supported operating systems.

Dim pkcs11 As New Chilkat.Pkcs11

// This would be a path to a .dylib on MacOS, or a path to a .so shared lib on Linux.
pkcs11.SharedLibPath = "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"
Dim pin As String
pin = "0000"
Dim userType As Int32
userType = 1

// Establish a PKCS11 logged-on session using the driver (.so, .dylib, or .dll) as specified in the SharedLibPath above.
Dim success As Boolean
success = pkcs11.QuickSession(userType,pin)
If (success = False) Then
    System.DebugLog(pkcs11.LastErrorText)
    Return
End If

// Set PKCS11 attributes to find our desired private key object.
Dim json As New Chilkat.JsonObject
success = json.UpdateString("class","private_key")
success = json.UpdateString("label","MySshKey")

// Get the PKCS11 handle to the private key located on the HSM.
Dim priv_handle As UInt32
priv_handle = pkcs11.FindObject(json)

// Get the PKCS11 handle to the corresponding public key located on the HSM.
success = json.UpdateString("class","public_key")

Dim pub_handle As UInt32
pub_handle = pkcs11.FindObject(json)

Dim key As New Chilkat.SshKey
// The key type can be "rsa" or "ec"
Dim keyType As String
keyType = "rsa"
success = key.UsePkcs11(pkcs11,priv_handle,pub_handle,keyType)
If (success = False) Then
    System.DebugLog(key.LastErrorText)
    Return
End If

Dim ssh As New Chilkat.Ssh

success = ssh.Connect("example.com",22)
If (success <> True) Then
    System.DebugLog(ssh.LastErrorText)
    Return
End If

// Authenticate with the SSH server using the login and
// HSM private key.  (The corresponding public key should've 
// been installed on the SSH server beforehand.)
success = ssh.AuthenticatePk("myLogin",key)
If (success <> True) Then
    System.DebugLog(ssh.LastErrorText)
    Return
End If

System.DebugLog("Public-Key Authentication Successful!")